From: Junio C Hamano <redacted>
Date: Fri, 21 Jun 2019 18:24:12 +0000 (-0700)
Subject: Merge branch 'md/url-parse-harden'
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=f9089e8491fdf50d941f071552872e7cca0e2e04;p=git.git

Merge branch 'md/url-parse-harden'

The URL decoding code has been updated to avoid going past the end
of the string while parsing %-<hex>-<hex> sequence.

* md/url-parse-harden:
  url: do not allow %00 to represent NUL in URLs
  url: do not read past end of buffer
---

f9089e8491fdf50d941f071552872e7cca0e2e04